commit e511b4e7cb7316b244d02e667c3f7667159d0ee8
author Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Wed Sep 16 14:11:09 2015 +0200
committer Manuel Pégourié-Gonnard <mpg2@elzevir.fr> Wed Sep 16 22:58:29 2015 +0200
tree abc0673808f5cc4e51de7e6caa1d3a69001a1997
parent c1b46d0242dc88da143842c16b99397c7add6dde

Ignore ECJPAKE suite if not configured on server

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index aab25e2..6676c18 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -707,6 +707,17 @@
     }
 #endif
 
+#if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED)
+    if( suite_info->key_exchange == MBEDTLS_KEY_EXCHANGE_ECJPAKE &&
+        mbedtls_ecjpake_check( &ssl->handshake->ecjpake_ctx ) != 0 )
+    {
+        MBEDTLS_SSL_DEBUG_MSG( 3, ( "ciphersuite mismatch: "
+                                    "ecjpake not configured" ) );
+        return( 0 );
+    }
+#endif
+
+
 #if defined(MBEDTLS_ECDH_C) || defined(MBEDTLS_ECDSA_C)
     if( mbedtls_ssl_ciphersuite_uses_ec( suite_info ) &&
         ( ssl->handshake->curves == NULL ||